This cluster centers on 4 connected domains identified through shared infrastructure and registration patterns. The domains include slaylook.com, nextstepfilings.net, modesees.com, corporatefilingassistance.org. This campaign was identified through automated analysis of threat intelligence feeds and entity relationship mapping.
nextstepfilings.net
First seen Apr 9, 2026
- No SSL certificate
- 3 community reports from users
Campaign Intelligence
Details
Related Domains
Community Reports
I received a letter addressed to a company that is not mine, but at my address. Envelope had an inked stamp that said it was mailed from 22204. Letter notes that it’s a “FIRST NOTICE” for 2025 - Annual Registration Instruction Form (Virginia LLCs) and that my annual registration must be filed by 12/31 to remain active / compliant. The letter is similar to the previous complaint’s letter, except the website address is different: my letter had www.nextstepfilings.net as the URL. [BBB Scam Type: Phishing] [Business: Next Step Filings] [Location: VA, USA - 22182]
I received two scam notices on the same day, claiming that two businesses registered to my home address owed money for registering as LLC’s for 2026. Neither of these companies are real. The companies names used 1) Happy Nails and 2) HappyToHelp Solutions LLC. I was to send $135.00 for each company, and use a coupon code “SAVE10” to save $10 if the form was completed by 12/20 and filed electronically at nextstepfilings.net [BBB Scam Type: Tax Collection] [Business: Next Step Filings] [Location: VA, USA - 20147]
Notification received from Next Step Filings regarding an LLC filing on one of our C Corps (first warning sign). Letter gave a strict deadline to create urgency and looked as if it came from the State of Virginia. Gave multiple methods to pay - QR code (with a discount!), mail, or their website (nextstepfilings.net). [BBB Scam Type: Fake Invoice/Supplier Bill] [Business: Next Step Filings] [Location: NC, USA - 28638]
Share Your Experience
What's Your Exposure?
Know your risk exposure to this message with a Thorough Analysis. It returns a detailed report covering the complaint history, your data breach exposure, related scam entities, and risk signals tied to this email message. Check the box and enter your email address now.